Technical Tip: Disable bypassing FortiAuthenticator Agent login

[matanaskovic]

Description

This article describes how to disable bypassing the FortiAuthenticator Agent login on a Windows machine.

Scope

FortiAuthenticator 6.4.6, FortiAuthenticator Agent 4.2.

Solution

Since it is possible to log in to a Windows machine without OTP and bypass the FortiAuthenticator Agent, it is recommended to disable 'Permit Built-in Password Providers' under the FortiAuthenticator Agent settings.

Navigate to Credential Provider Options -> Permit Built-in Password Providers.

Disable the setting and select Apply.

This setting must be configured manually on each PC.

Lock the Windows machine and log in again, this time using the FortiAuthenticator Agent login window.

Related documents:

Introduction live deployment

Introduction: FortiAuthenticator Agent for Microsoft Windows 4.2 Install Guide

FortiAuthenticator Agent for Microsoft Windows 4.2 release